XKEYCHAINX LABS
Trezor / Public disclosure

Pairing-code check bypass

Pairing could complete without knowing the displayed code.

Source date: 2026-06-22 (reported)Reviewed: 11 October 2026

Affected scope

Safe 7 THP pairing

What the attack requires

Malicious pairing exchange.

Response & remediation

What changed

Vendor reports rejecting the invalid exchange values.

What this finding establishes

Do not equate unauthorized pairing with demonstrated seed extraction; fix version unspecified.